Viewing the SmartVision status and configuration using the CLI

Prev Next

Follow these steps to view the configuration and runtime status of SmartVision.

Use the show smartvision config command to view configuration settings and use the show smartvision status command to view the runtime status. For detailed information about these commands, see the following topics:

Prerequisites

To view SmartVision configuration and runtime status:
  1. View the SmartVision configuration information and runtime status.

    hostname # show smartvision status
    hostname # show smartvision config

Examples

SmartVision edition appliance

Supported models are listed in SmartVision edition appliances.

This example shows the manufacturing default configuration of a SmartVision Edition sensor. SmartVision and data exfiltration detection are enabled. The SmartVision whitelists, data exfiltration whitelist, and data exfiltration customer home network are empty.

Note

Although data exfiltration detection is enabled by default, the SmartVision Edition sensor in this example does not detect data exfiltration activity because the data exfiltration homenet list has not been configured.

hostname # show smartvision status
SmartVision State
        Detection                      : yes
        Context Service                : running
        Data exfil detection state     : managed
        Beaconing detection state      : unmanaged
        TLS detection state            : unmanaged
        SmartVision Edition configured : yes
        Datapath mode reboot required  : no
        Current datapath mode          : SmartVision Sensor
        SmartVision Edition supported  : yes
hostname # show smartvision config

SmartVision Config
					
        Detection Enabled             : yes
        Context Service               : running
        SC Killswitch                 : no
        Data exfil detection enabled  : yes
        Beaconing detection enabled   : yes
        TLS detection enabled         : yes
        Base version                  : 2
        Rule version                  : 3

        Data exfil detection customer networks:
                None configured

        Data exfil detection whitelist networks:
                None configured

        Beaconing detection whitelist networks:
                None configured
SmartVision-capable Network Security sensor

Supported Network Security models are listed in SmartVision-Capable Network Security sensors.

This example shows the manufacturing default configuration of a SmartVision-capable Network Security sensor. SmartVision and data exfiltration detection are disabled.

Note

The Web UI Alerts > SmartVision page and Settings > SmartVision page are accessible even when is disabled.

hostname # show smartvision status
SmartVision State
        Detection                      : no
        Context Service                : running
        Data exfil detection state     : unmanaged
        Beaconing detection state      : unmanaged
        TLS detection state            : unmanaged
        SmartVision Edition configured : no
        Datapath mode reboot required  : no
        Current datapath mode          : Classic Sensor
        SmartVision Edition supported  : yes
hostname # show smartvision config

SmartVision Config

        Detection Enabled             : no
        Context service enabled       : yes
        SC Killswitch                 : no
        Data exfil detection enabled  : no
        Beaconing detection enabled   : yes
        TLS detection enabled         : yes
        Base version                  : 2
        Rule version                  : 3

        Data exfil detection customer networks:
                None configured

        Data exfil detection whitelist networks:
                None configured

        Beaconing detection whitelist networks:
                None configured
SmartVision-capable Network Security integrated appliance

Supported Network Security models are listed in SmartVision-capable Network Security integrated appliances.

This example shows the manufacturing default configuration of a SmartVision-capable Network Security integrated appliance. SmartVision and data exfiltration detection are disabled.

Note

The Web UI Alerts > SmartVision page and Settings > SmartVision page are accessible even when SmartVision is disabled.

hostname # show smartvision status
SmartVision State
        Detection                      : no
        Context Service                : running
        Data exfil detection state     : unmanaged
        Beaconing detection state      : unmanaged
        TLS detection state            : unmanaged
        SmartVision Edition configured : no
        Datapath mode reboot required  : no
        Current datapath mode          : Classic Integrated
        SmartVision Edition supported  : yes
hostname # show smartvision config

SmartVision Config

       Detection Enabled             : no
       Context Service enabled       : yes
       SC Killswitch                 : no
       Data exfil detection enabled  : no
       Beaconing detection enabled   : no
       TLS detection enabled         : no
       Base version                  : 2
       Rule version                  : 3

       Data exfil detection customer networks:
               None configured

       Data exfil detection whitelist networks:
               None configured

       Beaconing detection whitelist networks:
               None configured
SmartVision enabled and data exfiltration detection configured

In this example, SmartVision and data exfiltration detection are enabled. The three SmartVision and data exfiltration detection whitelists are configured, and appliance is configured to detect data exfiltration activity on the 192.168.0.0.24 network.

hostname # show smartvision status
SmartVision State
        Detection                      : yes
        Context Service                : running
        Data exfil detection state     : managed
        Beaconing detection state      : unmanaged
        TLS detection state            : unmanaged
        SmartVision Edition configured : no
        Datapath mode reboot required  : no
        Current datapath mode          : Classic Integrated
        SmartVision Edition supported  : yes
hostname # show smartvision config

SmartVision Config
					
       Detection Enabled             : yes
       SC Killswitch                 : no
       Data exfil detection enabled  : yes
       Beaconing detection enabled   : yes
       TLS detection enabled         : yes
       Base version                  : 2
       Rule version                  : 3

       Data exfil detection customer networks:
               192.168.0.0/24

       Data exfil detection whitelist networks:
               None configured

       Beaconing detection whitelist networks:
               None configured